| عنوان | FortiOS / FortiProxy - Heap buffer underflow in administrative interface |
|---|
| الوصف | CVE ID CVE-2023-25610
A buffer underwrite ('buffer underflow') vulnerability in FortiOS & FortiProxy administrative interface may allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI, via specifically crafted requests.
Exploitation status:
Fortinet is not aware of any instance where this vulnerability was exploited in the wild. We continuously review and test the security of our products, and this vulnerability was internally discovered within that frame.
Solutions
Please upgrade to FortiOS version 7.4.0 or above
Please upgrade to FortiOS version 7.2.4 or above
Please upgrade to FortiOS version 7.0.10 or above
Please upgrade to FortiOS version 6.4.12 or above
Please upgrade to FortiOS version 6.2.13 or above
Please upgrade to FortiProxy version 7.2.3 or above
Please upgrade to FortiProxy version 7.0.9 or above
Please upgrade to FortiOS-6K7K version 7.0.10 or above
Please upgrade to FortiOS-6K7K version 6.4.12 or above
Please upgrade to FortiOS-6K7K version 6.2.13 or above |
|---|
| المصدر | ⚠️ https://www.fortiguard.com/psirt/FG-IR-23-001 |
|---|
| المستخدم | Anonymous User |
|---|
| ارسال | 12/03/2023 01:51 PM (3 سنوات منذ) |
|---|
| الاعتدال | 12/03/2023 02:12 PM (21 minutes later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 222864 [Fortinet FortiOS/FortiProxy Administrative Interface تنفيذ التعليمات البرمجية عن بُعد] |
|---|
| النقاط | 20 |
|---|